.SYSTEMX 1.11.0-beta.1

.SYSTEMX 1.11.0-beta.1

Beta prerelease of the reusable .SYSTEMX project template. The published tag is v1.11.0-beta.1; Python package metadata uses 1.11.0b1. Pin the exact tag and review the release report before adoption.

What changed

• Agent Beta: Optional named BOT/DOT workspaces and task references. A revision-guarded access-link can attach a same-actor reviewed Access Matrix decision. Workspaces stay offline; no provider, model, or background process starts.
• Agent1: Opt-in, warning-only security and access review with 20 categories, 400 evidence questions, ten event buckets, names-only .env inventory, and an explicit read-only stdio session. The filename check answers zero of the 400 questions. One GitHub Actions secret can be set through hidden terminal input only after the active account's exact-repository admin permission is verified. A role label grants nothing. Post-write readback checks name/scope metadata only; shared records contain no secret values. Organization secret writes and local vault delivery are outside this beta CLI. The command does not enable Actions or verify a workflow consumer.
• Agent Alpha Agenda and Access Matrix: 20 default-deny agent, bot, and subagent role rows in canonical JSON and the included XLSX. Reviewed access decisions and Agenda options start empty. Guarded decisions, legacy-role upgrade, and formula-free scoped workbook export/check commands keep views tied to canonical JSON. A matrix row is not an OS or provider permission.
• Release and context tools: SemVer ordering supports alpha, beta, and final releases; the manager preserves adopted records and offers manual, pinned updates by default. release-counters reads GitHub software/media release counts separately from deployment records on demand. On a blank root, session-settings --compact reduced output from 3,248 to 1,043 bytes (67.9% fewer output bytes); this is not a billed-token, latency, or cost result.
• Windows checkout compatibility: Distribution verification recognizes nested .gitignore files as text for CRLF conversion, and Agent Beta normalizes reviewed CRLF seed text while rejecting bare carriage returns. Binary hashes remain exact. Four Python entrypoints use an explicit child process on Windows to avoid the Windows CRT path-splitting behavior of os.execv; focused tests passed on macOS. A native Windows run remains unverified.
• Documentation and media: White paper edition 2.1 covers this beta baseline. The repository includes 18 beta SVGs: four feature guides, seven role cards, and a second set of seven detailed agent guides with folder paths, prompt examples, process flows, and exact project-local CLI commands. The seven detailed guides have accessible text companions. The release includes 18 separate 7680 × 4320 JPEG exports; their hashes match the external archive. Generated illustrative art has lower native resolution than the 8K canvas. Four existing 4K field-guide images retain their alpha-baseline labels. A public GitHub SVG preview was visually verified. Earlier editions and raw Blender authoring files remain in historical or external archives, outside the portable template. No new video was made.

Manual local verification

This release uses manual local verification. GitHub Actions are disabled for the dotSYSTEMX repository, and this beta ships without an Actions workflow. Earlier failed CI attempts do not qualify as a release check. The source-matched suites on macOS 27.2 each ran 373 tests (367 passed, 6 skipped): Python 3.14.5 in 371.642 seconds and the resolved Python 3.11.15 binary in 319.873 seconds. Five skips require a case-sensitive filesystem; one requires native Windows handles. An initial 3.11 run via a user-local symlinked launcher failed one virtual-environment test because that Python installation looked for a nonexistent /install/lib/python3.11 standard library; the full rerun through its actual binary passed. Native Windows remains unverified. Record the source and asset evidence:

• Reviewed source commit: 10946a465f829409d66fba8cf3ca52f51b7207ac (direct main and peeled v1.11.0-beta.1 tag target).
• Full local suite and release validation: both 373-test macOS suites passed with six documented skips; release.py --check validated 272 distributed files, including 156 Markdown files.
• Final wheel exact byte size and SHA-256: 12,938,678 bytes, 5028f5e01b732f934bcccd1bfda579ef52200b5bb76a37743bd2c05cb627fa19; all 272 .SYSTEMX payload files match exact source bytes.
• Repository media: 18 beta SVGs plus four retained 4K JPGs. The 18 separate 7680 × 4320 JPEG release exports match the external source hashes. SHA256SUMS.txt covers all 21 download payloads; its own SHA-256 is 6f720fbbc3fff52715f19378b666f33b1f071d621ddb0c01673d870db87b7ee4.

The release's SHA256SUMS.txt lists all 21 download payloads. The public checksum download matched the published asset digest. Repository SVGs are source files, separate from JPEG release exports.

Compatibility and publication readback

The portable CLI targets Python 3.9+ with no third-party runtime dependencies. Native Windows Agent Y execution remains disabled pending process-termination verification. On native Windows, Agent1 metadata-only first setup, status, questions, and warning-only check remain available. Its dotenv inventory/sanitization/migration, review --answers, and existing-setup reconfiguration fail closed because required anchored file-handle operations are unavailable. A macOS PowerShell smoke check does not prove Windows-host behavior.

The direct main SHA and peeled tag target both read back as 10946a465f829409d66fba8cf3ca52f51b7207ac. The downloaded tagged source ZIP is 13,784,353 bytes, SHA-256 8ec1b845d071c697f6aa27b02ab44d7cb734648880046ca06ca5752345ddd256; its 292 files match the local tagged checkout byte for byte, including 272 .SYSTEMX files and 18 SVGs, and it contains no .github/workflows file. GitHub release ID 429845864 exposes all 22 assets with matching names, byte sizes, and SHA-256 digests. Authenticated downloads of every asset matched the local bytes and the 21 payload lines in SHA256SUMS.txt.

Release asset	Bytes	SHA-256
ACCESS-MATRIX.xlsx	7,313	8274c27eae2ea38d3d83f3960ecf78f5518913caa127b2dc7d853ee5aafe8679
dotsystemx-1.11.0b1-py3-none-any.whl	12,938,678	5028f5e01b732f934bcccd1bfda579ef52200b5bb76a37743bd2c05cb627fa19
SHA256SUMS.txt	1,990	6f720fbbc3fff52715f19378b666f33b1f071d621ddb0c01673d870db87b7ee4
systemx-agent-0-8k.jpg	2,821,967	65fdc8cfa9324f8969ebb046b93d880318eceab51927423522046435a2e9bf17
systemx-agent-0-detail-8k.jpg	2,872,385	96971d13ad63bc430db5c08bfae5b730c351d5d6d3ba34a480d983ed22b2544e
systemx-agent-1-8k.jpg	2,897,396	fc02c7a7618bdc09119db427a146582d91ef98cb77d43d00efbafe5ccba72788
systemx-agent-1-detail-8k.jpg	2,977,400	f1f1705cc6ba0296fd66ca99f6c32677676d0888a77fc7a5b849324868c4ca66
systemx-agent-alpha-8k.jpg	3,506,938	1ecb1348150bdcf3d21e3da200d207f32fb28bf09cb9220e759a8646f89eaaf8
systemx-agent-alpha-detail-8k.jpg	3,063,439	5d7438a590ead0b8d19ab83e57115a43a61dc04883d000de6767eeb35098086d
systemx-agent-beta-8k.jpg	2,725,562	6e8203ae43a888d3ec4edd7db2f59c6014573478d0d61774c6890c83c997b609
systemx-agent-beta-detail-8k.jpg	2,783,306	8831056940ccb19676a4e40dfad52d1e99762d6850387fd1f1da0aa6b95f1860
systemx-agent-x-8k.jpg	2,772,452	26eb1be283b2f777b68efb14ab6162af6f6fd61a388404c0ae9f144853bde505
systemx-agent-x-detail-8k.jpg	2,607,849	d9eb960593ad83fe76364670a85ec86a00432e185ebaead887060a7041981bb0
systemx-agent-y-8k.jpg	2,778,809	9424c299f061e950bc560e7ef968afac884279ae7cc18a03347af623405a53fe
systemx-agent-y-detail-8k.jpg	2,826,598	8170c13a4ad76333d840bc5a046a501b9165f334e21257c28c8e12a792715ed5
systemx-agent-z-8k.jpg	2,868,544	aeec87d65a76c320af2777552441d707fe1bbc6324d6a1af8b895aa89dbfd1a8
systemx-agent-z-detail-8k.jpg	2,632,738	9e3bf8f9855112990def4e4b5ed50ffe43a96cd2a20fd58261bdbafbc22a8182
systemx-guide-access-matrix-8k.jpg	2,790,777	a5c5b934932f200c56bf533ca8383600add358a4e5bf2ea638f376122b90ecff
systemx-guide-bot-workspaces-8k.jpg	2,830,948	8c7faef5222137a12c5a8c4a45ab533a1e4e1273c81b5232513084a5687bbee5
systemx-guide-lifecycle-8k.jpg	3,024,819	10a73904adaf6c77386c869d8ea17393b8c3085ac850a9d3521a5b5818b39afd
systemx-guide-security-access-8k.jpg	3,138,168	bd06f9039d5cdb56d2468a824ab8a803faa2d99919d15a2897db65577578ff90
SYSTEMX-White-Paper.pdf	20,669	8c281616a492fd9c754aff84d9be7e766af2f47401497a536c857b973299ae79

These receipts are separate from local tests and from any downstream deployment.

Limits: Agent1 reports advisory evidence and cannot certify a device free of malware, spyware, keyloggers, or MFA interception. GitHub secret name readback cannot verify a value or successful workflow consumer. Codex Security Deep Scan did not start because its worker required a managed filesystem permission profile; no Deep Scan coverage or findings are claimed. Local source checks, a GitHub prerelease, and static graphics do not certify downstream production readiness, live deployment, or owner acceptance. This template release deploys no application and installs no OS service.